{bc}
Apply
Company Site

Senior Security Software Engineer, Advanced Security

General Motors
USA
Full-time
Senior · 5+ years experience
Discovered 3 days ago

Full Job Posting

What You’ll Do

  • Design, build, and operate production cloud services in Python, including containerized workloads, event-driven processing, and data storage. Define and manage the supporting infrastructure as code.
  • Integrate findings and context from security tools, source control, and cloud application programming interfaces (APIs). Build AI agents that triage findings, gather evidence from source code and cloud configuration, and propose fixes.
  • Build and harden sandboxed environments for AI-enabled testing of authorized targets. Apply defense in depth, designing for the possibility that any individual containment boundary can fail.
  • Control agent access through isolation, least-privilege identities, network egress limits, and secrets management. Separate agents that produce results from those that verify them. Treat source code, tool output, and model responses as untrusted input, defend against prompt injection, and keep sensitive data out of prompts and logs.
  • Evaluate model accuracy, cost, and latency to inform model selection and detect regressions. Use evidence to explain technical trade-offs and guide improvements to the systems you own.
  • Partner with application security, penetration testing, and cloud security engineers to turn expert judgment into repeatable checks and deliver solutions across teams. Communicate technical risks and recommendations to non-specialists, review code, and mentor less-experienced engineers through constructive feedback and collaborative problem-solving.
  • Your Skills & Abilities (Required Qualifications)
  • Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field, or equivalent practical experience.
  • 5+ years of experience in software engineering, cloud engineering, or security engineering.
  • Strong experience writing production Python.
  • Experience with infrastructure as code, such as Terraform, and continuous integration and continuous delivery (CI/CD) on a major cloud platform.
  • Working knowledge of application security, including common vulnerability classes, how security scanners work, and where they produce false positives.
  • Experience building secure systems using least privilege, secrets management, isolation, and safe handling of untrusted input.
  • Ability to own work across teams, make sound decisions with limited information, and explain technical risk to people who are not security specialists.
  • Experience using agentic large language model (LLM) tools and solutions.
  • What Will Give You a Competitive Edge (Preferred Qualifications)
  • Experience building applications with large language models and agent frameworks, including tool use and output evaluation.
  • Experience with containers and Kubernetes.
  • Experience with sandboxing and isolation, or securing systems that execute untrusted code.
  • Experience with static or program analysis, such as writing Semgrep or CodeQL rules.
  • Experience in vulnerability research, penetration testing, or exploit development.
  • Familiarity with AI security risks and controls, such as the Open Worldwide Application Security Project (OWASP) Top 10 for LLM Applications.
  • Public examples of shipped work, such as open-source contributions, published tools, or technical write-ups.
  • #LI-SB3

Qualifications

  • Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field, or equivalent practical experience.
  • Experience with infrastructure as code, such as Terraform, and continuous integration and continuous delivery (CI/CD) on a major cloud platform.
  • Experience with containers and Kubernetes.
  • Experience with sandboxing and isolation, or securing systems that execute untrusted code.
  • Experience with static or program analysis, such as writing Semgrep or CodeQL rules.
  • Familiarity with AI security risks and controls, such as the Open Worldwide Application Security Project (OWASP) Top 10 for LLM Applications.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at General Motors

2027 Summer Intern – Research and Development – Vehicle Health Management

Warren, USA

Discovered YesterdayFull-time

Engineering Design group - Engine Team

Warren, USA

Discovered YesterdayFull-time

2027 Summer Intern - Research and Development - EPSR Lab

Warren, USA

Discovered YesterdayFull-time

Sr Engineering Designer - Engine Team

Warren, USA

Discovered YesterdayFull-time

2027 Summer Intern – Research and Development - Power Electronics & Energy Conversion Systems

Pontiac, USA

Discovered YesterdayFull-time

2027 Summer Intern - Research and Development - Energy and Propulsion Systems Architecture

Warren, USA

Discovered YesterdayFull-time

2027 Summer Intern – Research and Development – Vehicle Aerodynamics and Machine Learning

Warren, USA

Discovered YesterdayFull-time

Senior Strategist, Digital

Warren, USA

Discovered YesterdayFull-time